Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
File: 3SBri9IhV0yWWSRDGVuQBXacck0.mft (raw, json)
Hash identifier: OcnAqVBrlM/MdcFUVdYftIkEikxoli16Ic2M+5CL3L8=
Subject key identifier: FB:7D:25:BF:3D:D4:49:73:62:F6:97:45:2F:CD:BC:69:3E:CF:AC:E6
Authority key identifier: DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
Certificate issuer: /CN=dd206b8bd221574c96592443195b9005769c724d
Certificate serial: 01992255323A2C3A64012154552C1AE80EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 04:00:32 +0000
Manifest this update: Sun 07 Sep 2025 04:00:32 +0000
Manifest next update: Mon 08 Sep 2025 04:00:32 +0000
Files and hashes: 1: 3SBri9IhV0yWWSRDGVuQBXacck0.crl (hash: aawoo+O8fRZkPPKhXOLo/W9Zu+7J/Vlqd2qzkgesNgU=)
2: 5cvTQhZb21i8dsjZHSMpM2dxt9k.roa (hash: Jg1xw/OZvnd1OLClxYEzrvwZ5HBLqquVy880Rp6Vr+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:32:3a:2c:3a:64:01:21:54:55:2c:1a:e8:0e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd206b8bd221574c96592443195b9005769c724d
Validity
Not Before: Sep 7 04:00:32 2025 GMT
Not After : Sep 8 04:00:32 2025 GMT
Subject: CN=fb7d25bf3dd4497362f697452fcdbc693ecface6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:02:28:1e:b4:b9:d1:bb:56:1c:ca:f4:10:19:
9c:8b:4e:25:23:35:24:27:0e:d5:62:36:42:ed:06:
29:d9:19:24:80:6f:ed:79:9e:b6:8e:4b:74:d5:63:
d1:d6:c6:98:19:36:1b:b4:03:ff:d7:fa:d9:ee:c4:
63:cc:10:3e:09:be:05:c2:9c:6c:26:e9:d1:2f:6d:
db:ef:6b:c3:2a:13:65:62:19:1b:34:38:b8:c6:39:
2d:3c:cd:33:36:f4:63:36:2c:e4:30:0f:4b:15:7e:
0f:bb:a5:bc:b4:22:e8:47:a5:e6:39:82:c1:52:eb:
bb:80:1f:1e:e4:34:a7:0c:7c:9e:82:ab:a8:40:8e:
b7:85:49:f5:d5:9d:8f:39:e3:3f:5e:60:4d:eb:45:
02:cf:58:ef:96:be:12:2a:76:7d:de:63:92:fd:d7:
7e:6b:7a:e2:ad:19:e0:4a:f9:22:a9:29:ab:1a:64:
14:29:82:5a:0b:69:5a:a1:23:8b:eb:8d:81:cb:82:
bd:5c:8b:1e:ca:c6:1f:12:e0:f6:19:45:fc:29:aa:
85:2e:79:a1:c8:d5:03:65:dd:aa:4d:ae:ce:24:40:
19:cd:04:e1:8b:90:22:67:1c:81:89:e7:4c:8e:67:
f7:af:a9:4f:27:e6:df:27:43:24:e0:6f:8b:7d:0c:
e6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7D:25:BF:3D:D4:49:73:62:F6:97:45:2F:CD:BC:69:3E:CF:AC:E6
X509v3 Authority Key Identifier:
keyid:DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:77:5f:db:78:69:d0:5c:63:cd:4c:3f:a6:43:8b:f7:db:c7:
ae:bc:90:0e:5e:8c:4c:80:8d:a8:f9:5f:87:f8:38:54:40:61:
1f:a2:68:7d:32:0a:2f:8c:b4:ae:54:4e:e5:2d:20:2f:dc:01:
35:e8:79:be:7b:73:37:bb:4a:e9:9e:ca:28:dd:a8:3f:40:1a:
f0:3c:56:0f:35:7a:95:74:5d:bd:aa:e1:87:9d:9f:6a:f0:4b:
21:c3:d9:e6:d2:73:e1:8b:36:c1:a8:af:42:c3:8e:fe:f7:ed:
62:f1:d1:84:c6:c6:7b:9b:ca:51:42:69:43:f1:b8:38:3f:63:
f4:07:34:6e:a4:d2:78:04:e6:03:88:53:42:35:9e:20:ca:27:
c8:46:ef:0d:a8:17:b8:1f:8a:7c:b0:7f:5d:c7:db:d3:ff:75:
56:4a:fd:2a:c0:99:34:39:0d:c1:f7:11:f7:b7:30:72:4f:8f:
bd:31:c9:2d:60:3e:87:51:a4:b6:f8:71:fe:b1:da:70:49:83:
1e:51:cb:91:15:6f:08:d1:5f:0d:fe:c5:90:f4:e8:7d:9b:8b:
88:05:ef:87:ee:08:28:91:84:b1:32:1d:b6:bf:86:58:cd:4b:
fd:67:2f:99:79:d5:76:5e:ae:1c:5c:7b:22:a9:dd:75:0b:f2:
d0:80:65:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVTI6LDpkASFUVSwa6A7wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMjA2YjhiZDIyMTU3NGM5NjU5MjQ0MzE5NWI5MDA1NzY5
YzcyNGQwHhcNMjUwOTA3MDQwMDMyWhcNMjUwOTA4MDQwMDMyWjAzMTEwLwYDVQQD
EyhmYjdkMjViZjNkZDQ0OTczNjJmNjk3NDUyZmNkYmM2OTNlY2ZhY2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AIoHrS50btWHMr0EBmci04lIzUk
Jw7VYjZC7QYp2RkkgG/teZ62jkt01WPR1saYGTYbtAP/1/rZ7sRjzBA+Cb4Fwpxs
JunRL23b72vDKhNlYhkbNDi4xjktPM0zNvRjNizkMA9LFX4Pu6W8tCLoR6XmOYLB
Uuu7gB8e5DSnDHyegquoQI63hUn11Z2POeM/XmBN60UCz1jvlr4SKnZ93mOS/dd+
a3rirRngSvkiqSmrGmQUKYJaC2laoSOL642By4K9XIseysYfEuD2GUX8KaqFLnmh
yNUDZd2qTa7OJEAZzQThi5AiZxyBiedMjmf3r6lPJ+bfJ0Mk4G+LfQzmCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPt9Jb891ElzYvaXRS/NvGk+z6zmMB8GA1UdIwQY
MBaAFN0ga4vSIVdMllkkQxlbkAV2nHJNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1NCcmk5SWhWMHlXV1NSREdWdVFCWGFjY2swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9lYmM3OGItNTc4Yy00YTRmLTlhNGUt
ZTI5MTU3Njc5NjA0LzEvM1NCcmk5SWhWMHlXV1NSREdWdVFCWGFjY2swLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9lYmM3OGItNTc4Yy00YTRmLTlhNGUtZTI5MTU3Njc5NjA0
LzEvM1NCcmk5SWhWMHlXV1NSREdWdVFCWGFjY2swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiHdf23hp
0FxjzUw/pkOL99vHrryQDl6MTICNqPlfh/g4VEBhH6JofTIKL4y0rlRO5S0gL9wB
Neh5vntzN7tK6Z7KKN2oP0Aa8DxWDzV6lXRdvarhh52favBLIcPZ5tJz4Ys2waiv
QsOO/vftYvHRhMbGe5vKUUJpQ/G4OD9j9Ac0bqTSeATmA4hTQjWeIMonyEbvDagX
uB+KfLB/Xcfb0/91Vkr9KsCZNDkNwfcR97cwck+PvTHJLWA+h1Gktvhx/rHacEmD
HlHLkRVvCNFfDf7FkPTofZuLiAXvh+4IKJGEsTIdtr+GWM1L/WcvmXnVdl6uHFx7
IqnddQvy0IBl7Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:30 2025 by rpki-client